letsencrypt / boulder / 12958

66%

master: 66%

push

travis-pro

Remove ecVerify and rsaVerify. (#5071)

These functions sign a random nonce with a newly-created issuance key,
in order to verify that the key was correctly generated and its public
component was correctly extracted. In general we can trust that keys are
correctly created by the HSM, and unit and integration tests can check
that we are correctly extracting public keys.

Removing these avoids the possibility of signing something that could be
construed as a "certificate, but malformed."

2 of 2 new or added lines in 2 files covered. (100.0%)

13265 of 20237 relevant lines covered (65.55%)

0.73 hits per line